CVE-2025-21334

CVE-2025-21334 is an elevation of privilege vulnerability in the Windows Hyper-V NT Kernel Integration VSP component, stemming from a CWE-416 (Use After Free) flaw. It affects Windows Hyper-V systems and was published on 2025-01-14 with a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating high impact potential from local access.

A local attacker with low privileges can exploit this vulnerability with low complexity and no user interaction required. Successful exploitation allows the attacker to elevate privileges, potentially gaining high confidentiality, integrity, and availability impacts on the affected system.

Microsoft's update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21334 provides details on patches and mitigation steps. The vulnerability is also listed in CISA's Known Exploited Vulnerabilities catalog at https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-21334, indicating real-world exploitation.